Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How to sum(field) depending on another field

$
0
0
Hello all, I have a field called Type with three values and I want a chart of the percentage of these three values. I am looking for a chart like this, which is easy to achieve: ![alt text][1] [1]: /storage/temp/105222-capture.png But with the % value over the total count of another field for each type. I have a field called Count, that I want to sum for each type, so by now, my search is this: | timechart sum(Count) by Type The thing is that I can not find a way to sum this field depending of the Type field, if I had the sum, I could calculate the percentage myself. Someone knows if I can do it? Thanks in advance!

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>